Package: ftp.debian.org

Hi,

Please change pidentd from standard to optional.

The reasoning for this is the following. From observations around me I think 
it is far from expected that a new installation of a standard Debian system 
includes an identd listing externally, the majority of systems don't have 
identd (and thus explicitly removed it after system installation), and those 
that need it will be able to find and install it.

From a security point of view I think that it would be good if a standard 
Debian system would have no externally listening services by default and only 
open up those ports when the administrator installs such a package. This is 
one of only two ports still open on a standard Debian install.

This issue was put to the maintainer in bug 416570 well over a year ago, but 
received no response to date (the maintainer hasn't responded to any of the 
current bugs in over 2 years).


thanks,
Thijs

Attachment: pgpPspZucONCC.pgp
Description: PGP signature

Reply via email to